The service may be configured to set a maximum lifetime on a long-term credential so that it stops working automatically once that lifetime is reached. On providers without this feature for a credential type, the credential remains valid until it is rotated or deleted.
Long-Term Credential Expiry
CCC.IAM.CP19
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.IAM.TH09 | Static Credentials Outlive Their Rotation Period | Long-lived static credentials such as access keys for an identity are used and not rotated periodically according to security best practices, extending exposure in the event of credentials compromise. |